300-215 · Question #54
An insider scattered multiple USB flash drives with zero-day malware in a company HQ building. Many employees connected the USB flash drives to their workstations. An attacker was able to get access…
The correct answer is A. Automate security alerts on connected USB flash drives to workstations. B. Provide security awareness training and block usage of external drives. Automating alerts (or outright blocking) for USB device connections lets you detect and stop malicious drives at the endpoint before they can execute zero-day payloads. Security awareness training combined with policy enforcement against external drives reduces the likelihood…
Question
An insider scattered multiple USB flash drives with zero-day malware in a company HQ building. Many employees connected the USB flash drives to their workstations. An attacker was able to get access to endpoints from outside, steal user credentials, and exfiltrate confidential information from internal web resources. Which two steps prevent these types of security incidents in the future? (Choose two.)
Options
- AAutomate security alerts on connected USB flash drives to workstations.
- BProvide security awareness training and block usage of external drives.
- CDeploy antivirus software on employee workstations to detect malicious software.
- DEncrypt traffic from employee workstations to internal web services.
- EDeploy MFA authentication to prevent unauthorized access to critical assets.
How the community answered
(54 responses)- A83% (45)
- C9% (5)
- D6% (3)
- E2% (1)
Explanation
Automating alerts (or outright blocking) for USB device connections lets you detect and stop malicious drives at the endpoint before they can execute zero-day payloads. Security awareness training combined with policy enforcement against external drives reduces the likelihood that employees will plug in unknown media eliminating the delivery vector.
Topics
Community Discussion
No community discussion yet for this question.